Fmhassirkul 


a. Does the sysienv'project support, criminal, CT, or v : Cl invcabgations or 
assessments? 


x NO 


The svstem contains us 

er names, passwords, am 

t audit logs. | 

1 



land 

such information 

could be used to 

b7E 

support a criminal, <.. 1. or H.b 

investigation, inis systen 

■A 

1 


1 _ 1 

inch information and not 


ic fotormation is 



.stored -or manipulated. 


YDS [If yes, proceed to question ?. 


b. Are subjects of information boot whom the information is directly collected 
provided o written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

NO [The program will need to work with DCLIJ to deveiop/knpiemeni 
the necessary formtsp] 

>; YDS identify any forms, paper or electronic, used to request such 

information from the informstion subject; _ 

Individuals sign speeds, computer user agreements to ace essi I Thes: 

user agreements along with warning banners at login indicate thai | A ctivity mat 

he monitored. 

7, Arc Social Security Numbers (SSNs; eolSccled, maintained or disseminated Assn the 
\ t No > > vr wd Uv't m 11 1 mte, ! Me m 

x N() _Y11S 1 f yea, eheek all that a p ply: 


.SSNs are necessary to estahlish/conilrm. the identity of subjects, victims,. 

witnesses or sources in this law enforcement or intelligence activity. 


.SSNs are necessary to identify FBI personate! in this interna) administrative 

system. 

.SSNs are important for other reasons. Describe: 

The system/project provides special protection to SSNs (c.g,. SSNs are 
encrypted, hidden from all users via a look-up table, or only available to certain 
no.u.o. Describe: 
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X Yes. IHbrmabon tty sterns operated by contractors lot the i B! may be 
considered Privacy Ac?, system5 of records.. The cedent i Acquisition Regulation 
coatoma standard contrast c ice sea that most be md tided in the event the system 
cohorts, tvmintates or disseminates Hi and additional requirements may be 
deposed as a matter of Depart me sit of .Amite pokey. Cotnadtaiions with, the 
Office of tike (ienerai Counsel .nury be required if a contractor is operating the 
system. ter the FBI. 

Has the system undergone Certification & Accreditation fC&A) by the FBI 
Security Di vit:io;t (SecD)? 

NO If no, indicate reasom if €<&A is pending, provide anticipated 
eompktion date; 

x YCS If yes, please Indicate the .following, if known: 

Provide date of last C&A certifiiundon/rc'-eertifteatinn: 
Certlfkaikm T est and l ev a In at ion Hate Nov 200b 


Last Update to l N w 200*> 

Uonfiden tialdy;_lam_Moderate J.b.tdeflned 

Integrity: .Low x Moderate High Undefined 

Availability; .Low x Moderste High Undefined 
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If yc% pb»Mi provide ike date omt sme 
title of ike 0MB saimmskuK 



This is a new system/ project in devebpmeot. |JI' vox* cheeked libs block 
ST OF. I HC T I \ W O.'O . 'SOpkti UUl *«**£« !o 'MttV vpp«»"O ' ! '' 

submitted to FBI OC*C.'/F€TU for fb.ud FBI approval and dzUrm'mst'km if 
FIA on d/or other aeboo* ere repumxU 
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i 1 In Pi A \ u mpk*** os' sdier dlvkkm nppmval(s} sh^jkt K vfUwt*n.U so 
FBI (KB'YIA'l.r for Hsus! Fill appro* a! and drtzrmmtxtkm If VIA ami/or other 
a«t.lo»s are mplredo 
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(OGC/PCLU (Rev. 05/15/09) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(Equivalent to the DOJ Initial Privacy Assessment (IPA)) 

_ b3 


NAME OF SYSTEM / PROJECT [ 


Derived From: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 


Classified By: 

Reason: 

Name:| i 

Program Office :| | 

Name: 

Phone: 



Declassify On: 

1 , 1 

Division: CTD 

Phone:| ! 

Room Number: 

Room 

Number: 7458 



FBI DIVISION INTERMEDIATE APPROVALS 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: 

Signature: /s/ 

Signature: /s/ 

CTD/FTTTF 

Date signed: 1/4/2010 

Date signed: 1/4/10 


Name| 1 

Name| j 


Title: Unit Chief! 1 

Title: FTTTF Privacy Attorney 

FBIHQ Division: 

Signature: /s/ 

Signature: 

CTD 

Date signed: 1/25/10 

Date signed: 


Name: John A. Boyle 

Name: 


Title: Section Chief, FTTTF 

Title: 


After all division approvals, forward signed hard copy pins electronic copy to FBI OGC/PCLl! (JEM 7338). 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will be recorded on the 
following page.) 

Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)) 

1 - DOJ Office of Privacy and Civil Liberties (via e-mail to 
privacy@usdoj .gov) 

(if classified, via hand delivery to 1331 Penn. Ave. NW, Suite 940, 

20530) 

2 - FBI OCIO / OIPP (JEH 9376, attn: | I _ 

1 - FBI SecD/AU (elec copy: via e-mail t o UC l I 

1 - RMD/RMAU (attn: | | 

2 - Program Division POC /Privacy Officer 
2 - FBIHQ Division POC /Privacy Officer 


1 - OGC\PCLU intranet 
1 - PCLU UC 
1 - PCLU Library 
1 - PCLU Tickler 

b6 

b7C 


UNCLASSIFIED//FOR OFFICIAL USE ONLY 


epic.org 


EPIC-14-06-04-FBI-FOI/I-20150519-6th-Production 


EPIC-1757 




UNCLASSIFIED//FOR OFFICIAL USE ONLY 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


_PIA is required by the E-Government Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 


_X_PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_X_ Other (describe): 

This system is covered under the FTTTF/NSAC Datamart PIA, dated 8/11/2008 


Applicable SORN(s): _ 

Notify FBI RMD/RIDS per MIOG 190.2.3? _No _Yes-See sample EC on PCLU intranet website here: 

http://home/DO/OGC/LTB/PCLU/PrivacyCivil%20Liberties%20Library/form_for_miogl90-2-3_ec.wpd 

SORN/SORN revision(s) required? _No _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? _No _Yes (indicate forms affected): 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 
as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. 
Other: 


David C . Larson, Deputy General Counsel Signature: /s/ 

FBI Privacy and Civil Liberties Officer _ Date Signed: 3/2/10 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: name of the 
system/project, including associated acronyms; structure of the system/project, 
purpose; nature of the information in the system and how it will be used; who will 
have access to the information in the system and the manner of transmission to all 
users. 


b3 

b7E 


The information stored in| | 

b3 

b7E 


One of the units of the Foreign Terrorist Tracking Task Force (TTTTFtT 


b3 

b7E 

1 | is accessible to | [ analysts and FTTTF supporting personnel, 

with administrator approval required for account creation. Users will access the system 
via FBI Secret Enclave (FBISE) workstations at their desks. 

2. Does the system/project collect, maintain, or disseminate any information about 
individuals in identifiable form, i.e., is information linked to or linkable to specific 
individuals (which is the definition of personally identifiable information (PII))? 

_NO 5 If no, STOP. The PTA is now complete and after division approval(s) 

should be submitted to FBI OGC/PCLU for final FBI approval. Unless you are 
otherwise advised, no P1A is required.] 
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X_YES [If yes, please continue.] 


3. Does the system/project pertain only to government employees, contractors, or 
consultants? 

X NO _YES 


4. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO X YES 


5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? 

X NO _YES If yes, check all that apply: 


_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 


_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 


_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

_It is not feasible for the system/project to provide special protection to 

SSNs. Explain: 


6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

X NO [If no, proceed to question 7.] 

_YES 
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a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 


X_YES [If yes, proceed to question 7 ] 

_NO 


b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 

the necessary form(s).] 

_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Has the system undergone Certification & Accreditation (C&A) by the FBI Security 
Division (SecD)? 

_NO If no, indicate reason; if C&A is pending, provide anticipated 

completion date: 

X YES If yes, provide date of last C&A certification/re-certification: 


I Security Division granted ! | 

~™ | Authority to Operate (ATO) through October 20, 2011 (reference 

319U-HQ-A1487677-SECD, serial # 1761). 

_Don't Know. 

8. Is this system/project the subject of an OMB-300 budget submission? 

X NO _Don't know _YES If yes, please provide 

the date and name or title of the 
OMB submission: 

9. Is this a national security system (as determined by the SecD)? 

_NO X YES _Don't know 
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10. Status of System/ Proj ect: 

_ This is a new system/ project in development. [If you checked this block, 

STOP. The FT A is now complete and after division approval (s) should be 
submitted to FBI OGC/PCLU for Baal FBI approval and determination if 
PIA and/or other actions are required/) 


n. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? ! | was originally developed during late b3 

2005 and early 2006. k7E 

2. Has the system/project undergone any significant changes since April 17, 2003? 

X NO [If no, proceed to next question (II.3).] 


YES If yes, indicate which of the following changes were involved (mark all 
boxes that apply): 

_ A conversion from paper-based records to an electronic system. 

_A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 
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_ A change that results in new items of information in identifiable 

form being added into the system/project. 

_Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

_ Other [Provide brief explanation]: 

3. Does a PIA for this system/project already exist? 

_NO X YES 


If yes: 


a. Provide date/title of the PIA: 8/11/2008; FTTTF/NSAC Datamart 

I that contains limited Pll | I b3 

FTTTF/NSAC Datamart. Thus, this system is covered by that PIA. b71 

b. Has the system/project undergone any significant changes since the PIA? 

_X_NO _YES 

[The PTA is now complete and after division approval(s) should he submitted to 
FBI OGC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.] 
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FEDERAL BUREAU OF INVESTIGATION 
FOI/PA 

DELETED PAGE INFORMATION SHEET 
FOI/PA# 1272295-0 

Total Deleted Page(s) = 1 

Page 4 ~ b3 - National Security Act of 1947; b7E; 

XXXXXXXXXXXXXXXXXXXXXXXX 
X Deleted Page(s) X 

X No Duplication Fee X 

X For this Page X 

XXXXXXXXXXXXXXXXXXXXXXXX 
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(OGC/PCLU (Rev. 04/01/2011) 

FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM / PROJECT: I I b3 

I I - b7 ' 


BIKR FBI Unique Asset ID: SYS000253 


.Derived From: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Classified Bv: 

Name:| | 

Name: 



Reason: 

Program OfficeJ [Unit Chief 

Phone: 



Declassify On: 

Division: TSC 

Room 

Humber: TSC 3344 


Phone! 1 




Room Number: TSC 3336 




FBI DIVISION INTERMEDIATE APPROVALS 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: 

Signature: 

Signature: 

TSC 

Date signed: 

Date signed: 


Namej j 

Name:| | 


Title] lUnit Chief 

Title: TSC Privacy Officer 


After ail division approvals, forward signed hard copy pins electronic copy to FBI OGC/PCLU (JEH 7350). 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will be recorded on the 
following page.) 

FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section will be completed by the FBI 

PCLU/PCLO following PTA submission. The PTA drafter should skip to the next page and continue.] 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all users. (This kin d of 
information may he available in the System Security Plan, if available, or from a Concept 
of Operations document, and can he cut and pasted here.): 
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b3 
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b3 
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b3 
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b3 
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2. Does the system/project collect, maintain, or disseminate any information about 
individuals (i.e., a human being or natural person, regardless of nationality)? 

_NO [If no, STOP. The PTA is now complete and after division approvai(s) 

should be submitted to FBI OGC/PCLU for final FBI approval. Unless you are 
otherwise advised, no PIA is required.] 

_X_YES [If yes, please continue.] 

3. Please indicate if any of the following characteristics apply to the information in 
the system about individuals: Bear in mind that log-on information may identify or 
be linkable to an individual. 

(Check all that apply.) 

X The information directly identifies specific individuals. 

_ The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals. 
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_X_ The information can be used to distinguish or trace an individual’s identity 

(i.e., it is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4. 

_ None of the above. If none of the above, describe why the information does not 

identify specific individuals either directly or indirectly. [If you checked this item, 
STOP here after providing the requested description,] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

_X_NO _YES 


5. Is information about United States citizens or lawfully admitted permanent 
resident aliens retrieved from the system/project by name or other personal 
identifier? 

_NO. [If no, skip to question 7.] 

_X_YES. [If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is 
the subject of the information? 

_X_NO [If no, proceed to question 7.] 

_YES 


a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 


_NO 

_YES [If yes, proceed to question 7.] 


b. Are subjects of information from whom the information is directly 
collected provided a written Privacy Act (e)(3) statement (either on the collection 
form or via a separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 

the necessary form(s).] 


epic.org 


UNCLASSIFIED//FOUO 
EPIC-14-06-04-FBI-FOIA-20150519-6th-Production 


EPIC-1683 



UNCLASSIFIED//FOUO 


_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from 
the system/project? Full SSNs should only be used as identifiers in limited instances. 

_NO X YES If yes, check all that apply: 


_X_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 


b3 
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_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

_It is not feasible for the system/project to provide special protection to 

SSNs. Explain: 

8. Is the system operated by a contractor? 

_X_No. 

_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disse mi nates PH and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

_NO If no, indicate reason; if C&A is pending, provide anticipated 
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completion date: 

X YES If yes, please indicate the following, if known: 

Provide date of last C&A certification/re-certification: 

March 15, 2012 

Confidentiality:_Low_Moderate _X_High_Undefined 

Integrity: Low _X_Moderate_High_Undefined 

Availability: .C Low _X_Moderate_High_Undefined 

_Not applicable - this system is only paper-based. 

10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 
110-53 (codified at 42 USC 2000ee-3)? 

_X_NO 

_YES If yes, please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? 

_NO _X_YES 

12. Status of System/ Project: 

_ This is a new system/ project in development. [If you checked this block, 

STOP. The PTA is now complete and after division approval(s) should be 
submitted to FBI OGC/PCLU for final FBI approval and determination if 
PIA and/or other actions are required,] 

II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? March 2011 

2. Has the system/project undergone any significant changes since April 17, 2003? 

_ NO [If no, proceed to next question (II.3).] 
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_X_YES If yes, indicate which of the following changes were involved (mark all 

changes that apply, and provide brief explanation for each marked change): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_ A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_X_A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 

_ A change that results in new items of information in identifiable 

form being added into the system/project. 

_X_Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

_X_Other [Provide brief explanation]: 


b3 
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3. Does a PIA for this system/project already exist? 

X NO _YES 
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Although a PIA does not curr ently exist for the 
PI As have been completed for th(\ 
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If yes: 


a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 

_NO _YES 

[The PTA is now complete and after division approval(s) should he submitted to 
FBI OGC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.] 
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UNCLASSIFIED 


1- Program Division POC 
1- Division Privacy Officer 


PINAL FBI APPROVAL / »E IERM1N AI.IONS /COND1TIONS: '-a.\ , v 

- _ g _ x ~ a x n ^ _ 

_Pi A. is required by the E-Governmem Act. 

..._Pi A is to be completed as a matter of FB1/DO.I discretion. 

h PI A to be published on FBI.GOV (after any RMD FOIA redactions}? _Yes. \c _.,,:.e re= • 


X P1A is not required for the following reason(s): 

System does not collect., maintain, or disseminate Pit. 

System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks) 
X information in the system relates to internal go vena neat operations. 

_System has been previously assessed under an evaluation simitar to a PI A. 

X V > s - ’ tic., a privacy s sues (o pr vacs issues are unchanged) 

Other: 


Applicable SORN(ss: r 31-002, \ 33 Central Records System." 63 I ed Reg. 8671 (Feb. 20, 1998). as amended 66 
Fed. Reg. 842:1 Gan. 3t,200i); 66 Fed. Reg. 17,200 (Mar. 29.2001); 66 Fed.'Reg. 33,358 (June 22, 2001); and 70 Fed. 

\cm.y FBI RMP RID? per MIOC 190.2.57 _X_No 0Cs—See sample FC on PCLU intranet website Fere 

a dome DO <XX „ ®C ' i T oacACjvd^^OLibc-ies^olnLsmrrCFo r for megl°0-2G_.e a >o 

SORN/SOKN revision(s) required? JKJMo Yes 


P xV 3 e\ sesadd P vacs \ct (e\3i atements fo related fb us? _A N _Yes 


RECORDS. The program should consult with RMD to identity - 'resoKe any Federal records/electronic records issues. 
The xy \ten may contain Federal records whether or not it contains Proacy Act requests and, in any etc t, a recosds 
scree,sic anr by the NaOomd \ e and Records Admmiuratvn ss necessary RAID can p-omde acw-ce on tins 

as well as on com p l ian ce with re quirements lor Electronic Recordkeeping Cert ification and any necessary updates. 
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UNCLASSIFIED 

.X.SSNs are necessary to esi&blish?cmtfirm the identity of subjects, victims. 

witnesses or sources m this law enforcement or intelligence activity. 


SSNs are necessary to identify' FBI personnel in this internal admimstraiiv 


.SSNs are important for other reasons. Describe: 

X he system pr ? cot provides special protection to sb\s (e y SSNs arc 
encrypted, hidden t rom all users via a look-no tabic, or oniv rivallnhh- m rorrp .n 
users). Describe: | f 

It is not feasible for the sy stern /project to provide special protection to 
SSNs. Explain: 

t. is the system operated by a contractor? 

_No. 

_X_Yes Inter nation systems operated by contractors tor the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
coma is st iub d contract clauses drat must be included in the event t re s> s,e , 
collects, maintains or disseminates PIT and additional requirements may he 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

A Has the system undergone Certification Sc Accreditation (CScA) by the FBI 
Seeur Ity 1 )iv ision (SccD)? 

_NO O' no, indicate reason; if C&A is pending, provide anticipated 

completion date: 

_X YES If yes, please indicate the following, if known: 

Provide date of last C&A eertificatlon/re-eertifieation: 
Certification Test and E valuation Date Feb 20b? 

Last Update lo | ~| pob 2009 

Confidentiality:.Low.Moderate _x_High_Undefined 

Integrity: ......Low x Moderate High t ndefined 

Availability: Low v Moderate High _ Lndefinet 

Not applicable - this system is only paper-based. 
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Is ibis system/project the subject of an OMB-300 budget submission? 
X NO 
_YES 


! 1 - Does the system conduct data mining as defined in Section 804 of the 

Implementing Recommendations of the 9/11 Commission Act of 2007. F.I.. 110- 
53 (codified at 42 US€ 2000ee-3}? 

X _NO 

_YES 

12. Is this a national security system {as determined by the SecD)? 

.X_NO _YES 


13 . Status of System/ Project: N/A 

This is a new system/ project in development. 

II, EXISTING SYSTEMS /PROJECTS 

L W ben was i system project developed/ Initial )rafi (4 May 04 
2 , a- t v system pro e>x undergone any sigr ificant changes inee \pr i 1" 2003 ? 

NO [If no, proceed to next question (II.3).j 

. X_Y S I x es i iicate which of the following changes were involved (mark ai 

changes that apply, and provide brief explanation for each marked change): 

_______ A conversion from paper-based records to an electronic system. 

A change from information in a format that is anonymous or non- 
identifiable io a format that is identifiable to particular Individuals. 

__ A new use of an IT system/project, including application of a new 

technology, that changes how information In identifiable form is managed. 
. "or example,change that « ould create a more open erw ronment and/or 
avenue for exposure of data that previously did not exist.) 
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*OGt' P< l i (Rev. mi (if Col it 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM / PREUEC T: | | b7E 

BIKR FBI Unique Asset IJ>:_KO:N-201AAOS!.. 


Dmived iWo 

S VSTE M/I* ROT EC I POC 

FBI OCC/PCLC POC 

< tasvifk-d Bj: 

Name: | i 

Name: 


Reuse re: 

Program Office: Twdrist Screening 

Phone: | 


Ds: 

Division: National Securiie Branch 

Phone: | | 

:Roo?tv:Number; LiNsiv Park 3160 

Room is 

lumber: JEH 7.350 


KB! DIVISION 1NTERMED!A TE APPROV ALS 



Program Manager (or oilier appropriate 
executive as Division determines) 

Division Privacy Officer 

Prograin Diviskm: 

Signature: 


Signature; 

N.-A 

Date signed: 

Name: 

Date signed: 

Name: 


Side: 



! BiiiQ Division; 

Signature: 

_t- 

lawrSd __1. 

ssivrst IT 

Date sinned 


Date signed 1 " „ 1 1 


Name: | 

Named [ 


Tide: Tern 
Chief_ 

trist Screening Center.-IT i nit 

. . 

i stle i SC Privacy Office! 


Ahrcaii do ohm n^m-ma'E, iWoaed -dgnvd hard eopx gkt.s electronic e<>|n to I VA OCCd X IJ' ;i? H TTm, 


tfl*O J ASSIF3BD//P0W 
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FINAL FI ii APPROVAL/ DFTFHAIIAATSOAA /CONDITIONS: 

FO..U-PO.O foihnsiae Pi'.A stibimssioo. Vi-c Pi A draper sands; .ski;;; 


ktpieied As she HU 


PiA is ivquircd by the {LGovermncat Acs. 

..PSA A so be completed as a matter of FBCDOj discretion. 

is PiA as he published on FRi.GOV t after sissy RsVSO POiA redaciio 


PIA is tiol respbred for she following reasou{s.r: 

• ;• ssei \ does» ■> c >lk ct m : m a . s ; ilssciu a a PI; 

Sysit'sts is grandfathered {in esbiensx before 4/17/2003; no later diaoges po.sistg signiOesat privacy risks!. 

.iiiibrmatuxi is; the system rdafvs a- is-tc'sss;si e.overamca! operations. 

)i® 1 >» s's is si f s - si trier ;>st nation milar to a WA 

..._ N <s significant nmaer issues for orivacs' issues arc tmcltanucd _, 

X Other :skscnbc;:| 


^sviis tx* desenbed sn chief pm 




Applicable SORN{;;): _ 

Notify l-HI RMD/RiOS per MK>G 100.2.3? X No Yes-See sample KC on PCI..U hitratict website here: 
imps&home/Dii/iKK'X.'rHA ! CiA;: : PnvcicyCis'ii%jOf iherties'XCtii..ibi'aiyUXi':s; for niloi<l f )0-2O ec.sspsi 

SOKN/SOKN rs'vsMi>u(d required? X No Yes si;niu:ssu: ret is=s.<n\ n;\::k;k: 


Hdd Privacy Acs ;e}{3) snuenwnis ?br rdaied ion 


RFCOEOS, Use program should consul? with HMD to idenilf'y/Ycsolvc asiy Federal teconis/eSeetroaie records issue 
His' system may smntsdn Federal records whether sir no? i? contains Privacy Act request* ansi, in any even;, a records 
ppmvesi by she Natiot archives and Records Administratlmi is necc n A in pros \ h 
as s>,oiI as on ae>aipJiauce svnh rcqttitcmetits tor {Electronic Reeorslkeeping Cciiificatipu an si nay necessary upslates. 


Xktnica F. Ryan 

ilnii Odd'. Privacy ansi Civil l.iherties Unit 
FBI Privacy and Civil Liberies Offi<;s-r 


Date Signed: <£ / 


.a : 


■*C 


- S 
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j. INFORMATION ABOUT THE SYSTEM / PROJECT 


I. Provide a general description oft tie system or project that includes: (a) name of 
the system/projeet, including associated acronyms; (l>) structure of the 
system/projeet, including Interconnections with other projects or systems; (e) 
purpose of the system/projeet; (cl> nature of the information in the system/project 
and how it will be used: (e> who will have access to the information in the 
system/projeet; (I) and the manner of t ransmission to all users, (This Find of 

5 * V * s # K Mil'. !S v i :iiW s 



Attached are two technical illustrations depicting the[ 


2. Docs the system/proieelcollect. maintain, or disseminate any information about 
individuals (i.e.. a human being or natural person, regardless of nationality)? 

X NO | If no, STOP, The FT A is non complete and idler division approsalis) 
should he -noonim'd to FBI ih'X'Tf 1 f fur final FBI approval. Unless sou are 
otherwise ad vised, no PIA Is required.! 

| C ollects audit log and gener al ioeoo infor mation. Other types of PH 

,> i eeted o ain tained, o disseminated V, | | .nc described in the Prixacy Import 

Assessment for | 1 

YS,i» }If \ es, please continue.) 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or he 
linkable to an individual. 


b7E 


b7E 


b7E 


b7E 


b7E 
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(Check all that apply,} 

The information directly kleoti fies specific individuals. 

The information is intended to he used, in conjunction wish other data elements, 
to indirectly identify specs Ik: individuals. 

( he information can be used to distinguish or trace an individual’s identity (i.e„ it 
i s linked or I mkahl e to specs lie i stdi \ id uni s>. 

I f you marked sun of the above, proceed to Question 4. 

None of the above. S( none ol the above, describe why the information does not 
identity specific individuals either directly or indirect!}, jlfxots cheeked this item, 

N TOf hen: after prox (ding the requested desQ1pttbO;j 

4. Does the sysient/projoet pertain only to government employees, contractors, or 
consultants? 

..NO _YDS 


5 Is information about \ uited States citD.cns or I awful!} admitted permanent resident 
aliens retrieved front the s\ stem-project by name or other personal identifier? 

NO. 11f no, skip to question ?.} 

.YES, (If yes, proceed to the next question.! 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

NO {If no, proceed to question 7.| 

.YES 

a* Does the system/project supi>on criminal, CT, or EC; investigations or 
assessments? 

NO 

.YES Ilf yes, proceed to question ?.f 
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b. Arc subjects of information from whom the information is directly collected 
provided o written Privacy Act tc}{.>) statement (either on the collection form or via a 
separate notice}? 

NO {The program w ill need to work with POLO to deyelopdmplemcnf 
the necessary form(s).j 

_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7 . Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only he used as identifiers in limited instances. 

.NO Y LS 1 f yes, cheek all that apply: 


_SSN$ are necessary to estabhsh/coollrm the identity of subjects, victims. 

A Sloesses or sources in this law entoreernem or intelligence acth its. 


SSNs arc necessary to identify FBI personnel is: tins Internal administrative 

system, 

_SSNs are important for other reasons. Describe: 

• he >AStenvptoj» ct provides special protect ion to SSLs (eg. SSNN arc 
encrypted, hidden front td! users via a look-up table, or only available to pertain 
users}. Describe: 

.ft is not feasible tor five systerntproject to provide special protection to 

SSNs. Explain: 

8. Is the system operated by a contractor? 

.No. 


_/Yes, Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The federal Acquisition Regulation 
contains standard contract clauses that ntust he included lit tire event the system 
collects, maintains or disseminates Ell and additional requirements Stray he 
imposed as a matter of Departrnent of Justice policy. Consultations wills the 
Office of the General Counsel may be required if a contractor is operating the 
system tor the FBI. 

Has the system undergone Certification A: Accreditation (C&A) by the FBI 
Security Division fSecD}? 
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M() If no, .indicate reason; iftO&A is pending provide anticipated 
completion date: 

Vi .S If yes, please indicate the following, if know a; 

Provide daio of fast i'& A eeritfk'ation/rc-eertii'kaihia: 

Confidentiality:_Low_Moderate High I ode flood 

integrity: Low Moderate High Undefined 

Availability': m J.«m Moderate High l a define d 

Not applicable fin? system is only paper-based. 
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10, Does the system e mtdyct data joining y$ defined in Section 804 of the 

Implementing Recommendations of the W] 1 (font mission Act of 2007. i\|„ i 10- 
53 (codified a! 42 DSC 2000ce-3}? 

.NO 

Vf S If yes, please describe the Unfit mining function: 

i I, is this a national seem it> system (as determined b> the SeeDD 
. NO __Yl-S 


! 2. Status of Stole nt Project: 

I hi* is a new system-' project in development. {if \n« checked dsN (dock 
\T<H\ 1 he Pi \ s* sum complete -anti after dh hints itpps'snaitst should he 
submitted to Mil Old ON'Ll for tmnl f IN uppmusl and tk'KTodmuhm If 
PI x ctntl/or other art urns ore regniredd 


II, KXISTiW; SYSTEMS/projects 

1, When was the systenvprojcct developed? 

2. lias the system project undergone any sigttiJkam changes since April 17. 2003 

NO [If no. proceed to next qssesiioo 0L3).{ 


YFS If yes. indicate Which of the following changes were Involved (mark ail 
changes that apply, and prnv kk brief explanation for each marked change). 

A conversion from paper-based records to an electronic system. 

A change front information in y iormot that is ynommom nr non- 
kienfifksble to a format that is identifiable so partiettiat individuaht. 

A new tote of ast 11 system project, including application o: a new 
technology, that changes how Information in identifiable form is managed. 
(I or example, a change that would create a more open csniromnciH and <*i 
.nemte -or exposure o! data that pnwiously did not cdsLt 

A change that tvstnts in in format ion in 1 1 mtfial le fortst home 
merged, centrals red. ot matched wit h o( h er d at abases: 
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A new method of authenticating the use of and access to 
mlornuuon m idem f able tosm by numbers o. she public 

A systematic incorporation of databases of inlbs matiou in 
identifiable form purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results in 
new uses or exchanpsorihfdnnadon in identifiable form. 

A change that results in a new use or disclosure ot' in format Ion in 
identifiable form. 

A change that results in new? items of information in identifiable 
form being added into the system/projeef. 

Changes do not involve o change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination ot'intbrmation from the system project 

.. Other j Pros kle brief explanation j: 

3. Does a Pi A for this systens/projeet already exist? 

NO YES 

If yes: 

a, Provide date/title of the PI A: 

b. 1 las the system/proieet undergone any significant changes since the if.A'? 

.NO .YES 


11 fw t‘ i A Is now complete and after do bum upprnxaits) should Pi submitted to 
I HI tKAMH I t fur fond F.Hi approval and ditermmmum if PI S andAsr other 
actions ore retptovdd 
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_ FBI Privacy Threshold Analysis (PTA) Cover Sheet (OGC/PCLU (Rev. 05/02/07) 

NAME OF SYSTEM: | I b7E 



SYSTE M POC _ 

Name: | | 

Program Office: TOCU 
Division: Operational Technology 

Di vi si on_ 

Phone j ~~| 

Room Number: c-300 


FBI OGC/PCLU POC 

Name: j j 

\—jZkk one: 

Room: 7338 


b6 

b7C 


FBI DIVISION APPROVALS A PIA (and/or PTA) should be prepared/approved by the cognizant program management in 
collaboration with IT, security, and end-user management and OGC/PCLU (PIAs/PTAs relating to electronic forms/questionnaires implicating 
the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk.) If the subject of a PTA/P1A is under the program 
cognizance of an FBIHQ Division, prior to forwarding to OGCthe PTA/PIA must also be referred to the FBIHQ. Division for program review and 
approval, if required by the FBIHQ Division. 



Program Division: 

FBIHQ. Division:OTD 

Program Manager 

Signature: 

Signature: /s/ 

(or other appropriate 

Date signed: 

Date signed: 11/13/08 

executive as Division 

Name: 

Name:| | 

determines) 

Title: 

Title: Supervisory Intelligence Analyst 

Division Privacy Officer 

Signature: 

Signature: /s/ 


Date signed: 

Date signed: 11/24/08 


Name: 

Name:| j 


Title: 

Title: Division Privacy Officer 


Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (|EM Room /338). 

FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: 

M 


Date Signed: 

12/22/08 


Name: 

David C. Larson 


Title: 

Deputy General Counsel 




final FBI 


approval, FBI OGC will distribute as. follows: 

1 - Signed original to 190-HQ-C1321794 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 

2 - FBI OCIO / OIPP 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC/Privacy Officer 
2*- FBIHQDivision POC /Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


1 - OGC\PCLU intranet website 
1 -PCLU UC 
1 - PCLU Libraiy 
1-PCLU Tickler 
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FBI PRIVACY THRESH OLD ANALYSIS (PTA) _ 

NAME OF SYSTEM: | | b7E 

For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 


A. General System Description: Please briefly describe: 

I | s part of the Technical Evaluation Office (TEO) in the Technical Operations Coordination Unit (TOCU). This 

system is used by intelligence analyst s) 

| This system does not collect or m aintain personally identifiable information. The 
information is analyzed and disseminate ^ | 

1. Type of information in the system: 

Information regardin gl I b7E 

2. Purpose for collecting the information and how it will be used: 

The information is used to create report ^" | b7E 

3. The system’s structure (including components/subsystems): 

The system i j ~| 

| [ within theSCIF. | fr nd does not leave the SCIF. 

4. Means of accessing the system and transmitting information to and from the system: 


b7E 


b7E 


Isolated terminals in aSCIF. 


5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 


All TEO personnel have access to the system and all are properly cleared and have a need to know. The system is locked down 
using passwords that require change every 90 days. 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 
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FBI PRIVACY THRESHO LD ANALYSIS (PTA) 
NAME OF SYSTEM: | 


| ~| has access to the system as the system ISSO and holds the proper clearance and need to 

know for the information. 

7. Has this system been certified and accredited by the FBI Security Divisions? X Yes _No 

8 Is this system encompassed within an OMB-300? _Yes X_ No _Don'tKnow 

(ifyes, please attach copy of latest: one.) 


I. Was the system developed prior to April 17, 2003? 

_YES (If "yes," proceed to Question 1.) 

X_NO (If "no," proceed to Section II.) 

1._Has the system undergone any significant changes since April 17,2003? 
_YES If "yes," please explain the nature of those changes: 


(Continue to Question 2.) 

_NO (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ’s Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, 
no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: | | b7E 


_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


II. For systems developed after April 17, 2003. 


1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 


(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

X_NO (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, 

approval, and forwardingto DOJ’s Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIA is required.) 


3. Is the system solely related to internal government operations? 

_YES If yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes,” a full PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unless you are otherwise 
advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIA is required.) 


III. Full or Short-Form PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 
_YES (If "yes," afull PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 
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FBI PRIVACY THRESH OLD ANALYSIS (PTA) _ 

NAME OF SYSTEM: I I b7E 


_YES A short-form PIAis required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2, 6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DOJ reviewing officials reserve the right to 
require completion of afull PIA. (PTAis 
complete—forward with PIA.) 


_NO (If "no," a full PIAis required. PTA is complete.) 
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FINAL FBI APPROVAL / DOXKMINA'ITONS / CONDITIONS; 


' V XV ' 'x 

PiA \ v 'v x' nmtet.xt x*n o way..! w i M Gd >hsen i o; 


:> be p«hlishec* oh PBi.GOV (after any RAID FOIA redaotic 
mUmon; security sv.Uem. 


PiA is not required for the following renaonts): 

System does not collect. maintain.. or disseminate Ft: 

N ! X i s'- v x ' » 0 <. S) six ' ix 

t o formation in rbe system relates to internal cove; omen: operations. 

System has beer; pseviousiy assesses; under an evaluation similar to ;; Pi A. 

No significant privacy issues {'or privacy issues are unchanged). 

Other p Escribe): 

.Apphechk SORNmb.IOSna y W^^. 

Notify = HI RMD/RJ;)S per MiOG i90 2.3' :> No xYes-Gee sample PC on PGi.b intranet website here: 
SORN/SORN revisionfa) required? x No Yes <mdmmc revisions needed): 

IYennreYev;se : 'add Privacy Act (e}(3} statements for related forms? x No . Yes (Indicate forms sflecied}: 

X ' >X ' ' ' X > \ x'S 'X t x > K\ xO 1 o, a X , ' X x V x' IxS'x <x U x t ' XX ' «. •' 

schedule approved by the National Archives and Records Ad'nuusirahon is necessary. RY1D can provide advice on thh 
as ceil as on compliance wig; requirements ibr Electronic Recordkeeping Certifiemion and any necessary updates. 
"Other. 

A Pi A was completed on | . | e --1/24/2008. Because the system was developed before 2003. no Pi A was required to 
be eoxmicSssl As a matter of DO.i nolky. a Pi A. most now be completed for f ' 


_jAetme Gnu Chief 

Privacy and C;vil_ldbert;es Unit. 

x ' > os x \ < 1 ' «' x x n 

Counsel 

i Hi Privacy ami Civil Liberties Officer 
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UNCLASSIFIED // FOtlO 


2 . 11 s ' ''.'u 'i 4 i , vr w ^ ae . , ' i 

.NO 

X.YES [If yes, please continue.! 


3. Please Indicate if any of the following characteristics apply to the irdbnnatkw in the 

" < < S , ' >'< S O C> lO 1 ' '\'l 1 ' . V. X X 

linkable to an Individual, 
t Check ah that apply.) 

X 1 he intbnnatlen directly identifies specific individuals. 

X T he inhu mation is intended to be used, in conjunction with other data elements, 
to Indirectly identity .specific individuals. 

X The ntteno.uion can be used to distinguish or trace an .individual^ identity (t,e.. 
is licked or linkable to specific individuals?. 

If ynu marked any of the above, proceed to Question 4, 

None of the above. If none of the above, describe why the irdonrtatioo does not 
identify specific individuals either directly or indirectly. 


4. h-'c.s K y\ "aat pso u ; pertasa only V got content one.'KpSv.', '-.mPsueons, ,-s 
consultants? 

.X NO YES 


IS. ' * ' „ ^ r v s < , v v o o 

aliens retrieved from the system/project by name or other personal identifier? 

NO. [If no, skip to question 7,1 
X Vi'S [If yes, proceed to the next question,) 


fi. Does the systeniOrmect collect any Information directly from the person who is th 
NO )if no, proceed to question 7.) 


UXCLASSIFIEB // FOUO 
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UNCLASSIFIED // F0UO 


x IBS 


a. Does the system/project support criminal, C L or FCI investigations or 
assessments'; 

.NO 

X YES Ilf yes, proceed to question 7„| 


h. Are subjects of h.hbrmation Iron's whom the information is directly collected 
provided a writte n Privacy Act {e|{3i statement (either on the collection form or via a 
separate notice)? 

—--1 1 - 


NO (The program will need to work with PCLU to devefop/impiement 
the necessary form{s).j 

YES Identify any forms, paper or electronic, used to request such 
information from the information subject: 

7, 1 Arc Social Security 'Numbers (SSNs) collected, maintained or disseminated Iron? the 
system/project? Full SSNs sbouid only be used as Identifiers in Bruited instances. 

X_NO ..YES If yes, cheek nil that apply : 


..SSNs are necessary to establ ish: confirm the Identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 


..SSNs are necessary to identify FBI personnel in this internal administrative 

system 

SSNs ate important for other reasons Describe: 

.The system/proieet provides special protection to SSNs (e.g., SSNs are 

encrypted, bidden from all users via a look-up table, or only available to certain 
users). Describe: 

.It is not feasible for the system project to provide special protection to 

SSNs. 

Explain: 


UNCLASSIFIED // ECHO 
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